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Abstract 



X). 

^ , We study a graph-theoretic property known as robustness, which plays a key role in the behavior 

of certain classes of dynamics on networks (such as resilient consensus and contagion). This property 
is much stronger than other graph properties such as connectivity and minimum degree, in that one can 
construct graphs with high connectivity and minimum degree but low robustness. We first show that in 
C/^ , general, it is NP-hard to determine to the extent to which a given graph is robust. We then investigate the 

fj . robustness of common random graph models for complex networks (Erdos-Renyi, geometric random, 

and preferential attachment graphs). We show that the notions of connectivity and robustness coincide on 

►-j>. I these random graph models: the properties share the same threshold function in the Erdos-Renyi model. 



cannot be very different in the geometric random graph model, and are equivalent in the preferential 
attachment model. This indicates that a variety of purely local diffusion dynamics will be effective at 
spreading information in such networks. 

I. Introduction 



^ I Complex systems and networks (both natural and engineered) arise as a result of local 

H ■ 
_Cy ■ interactions between various agents. A key feature of such systems is their ability to diffuse 

information throughout the network; for instance, the fields of sociology and epidemiology 

examine the spread of ideas and diseases through populations of people, based on the patterns 

of contact between the individuals in the population [1]. A special case of information diffusion 

in networks is the emergence of consensus, where one or more parameters of various agents 
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become aligned after a sufficiently long period of local interactions [|2l; canonical examples 
include the synchronization of internal clocks in sensor networks and the rendezvous problem 
in large robotic swarms [13]. Another example is that of information cascades, which have been 
studied in contexts such as contagion H and marketing []3. 

A fundamental challenge in the study of diffusion is to identify network properties and 
diffusion dynamics that allow legitimate information to propagate throughout the network, while 
limiting the effects of illegitimate individuals and actions. For instance, the problem of reaching 
consensus in the presence of misbehaving agents has been studied extensively over the past 
several decades by various communities (e.g., see [|2l, W[ and the references therein). These 
classical works have shown that the network connectivity (i.e., the number of nodes that have 
to be removed before the network becomes disconnected) is a key structural property for this 
problem. When the connectivity is sufficiently high, there are various algorithms to allow reliable 
dissemination of information (under the local broadcast model of communication) [|7l, [ISl- 
However, these methods typically require all nodes to have full knowledge of the network 
topology, making them impractical for complex networks where the nodes are generally agnostic 
about the network structure and dynamics. 

Various authors have investigated consensus dynamics where the nodes attempt to minimize 
the influence of misbehaving agents without global knowledge of the network topology [l9l- f[Tn . 
In [[TT||. [[T2||. it has been shown that network connectivity is no longer sufficient to characterize 
convergence to agreement when the nodes use a certain class of local filtering rules. Instead, 
in [[T2I . we introduced a new graph property called robustness, and showed that consensus can 
be reached (resiliently, and without requiring global information) in graphs that are sufficiently 
robust. As we will describe later in this paper, this concept also plays a key role in the study 
of information cascades and contagion in networks. Given the fundamental role of robustness in 
such information diffusion dynamics, we start by characterizing the complexity of determining 
the robustness of a given network, and show that the problem is NP-hard. We then turn our 
attention to three specific random graphs that are commonly used to model complex networks: 
Erdos-Renyi graphs, geometric random graphs, and preferential attachment graphs. Our analysis 
reveals that the notions of robustness and connectivity coincide on these random graph models, 
meaning that random graphs with a high connectivity also tend to have high robustness. This is 
perhaps surprising, given the existence of pathological graphs where these metrics are far apart 



(as shown later in this paper), and suggests that a variety of diffusion dynamics (that are agnostic 
of the network structure) will be effective at spreading information in such networks. 

A. Notation 

We will use the following notation regarding the asymptotic behavior of functions [[T3l : 

• f{x) = 0{g{x)) if there exist constants c > and a;o such that |/(a;)| < c\g{x)\ for all 

X ^ ^0' 

. f{x) = n{g{x))ifg{x) = Oif{x)y, 

. fix) = Q{g{x)) if fix) = 0{g{x)) and f{x) = n{g{x)); 

m. 

9{x) 



fix) = o{g{x)) if {gj ^ as x ^ oo. 



II. Robustness of Networks 

Consider a network modeled by the undirected graph Q = {V,£}, where V = {l,...,n} 
is the set of node^ and S C V x V is the set of edges in the network. An edge {i,j) G S 
indicates that nodes i and j can communicate with each other. The set of neighbors of node 
i is defined as Vj = {j G V: {i,j) G S}, the degree of node i is denoted by di =|Vi|, and 
the minimum degree of the network is minjgy di. A path is a sequence of nodes ii, . . . , z^ such 
that (ij,ij^i) G £,yj G {1, . . . ,k — 1}, and we say a collection of paths between nodes i 
and j is pairwise disjoint if no two of them share a node (other than i and j themselves). 
The connectivity of the network is the largest integer r such that every pair of nodes has at 
least r pairwise disjoint paths between them; this is a fundamental metric in networks and 
captures information redundancy across the network through independent paths. By Menger's 
theorem lllT4l . the connectivity of a network is also equal to the smallest number of nodes 
that have to be removed in order to disconnect the graph. In order to capture another form of 
information redundancy, we proposed the following topological properties in [[T2l. 

Definition 1 (r-reachable set): For a graph Q and a subset S of nodes of Q, we say S is an 
r-reachable set if 3i G 5 such that \Vi \ 5| > r, where r G Z>i. D 

Definition 2 (r-robust graph): A graph Q is r-robust if for every pair of nonempty, disjoint 
subsets of V, at least one of the subsets is r-reachable, where r G Z>i. D 

We use the terms node and vertex interchangeably in this paper 



In words, a set S is r-reachable if it contains a node that has at least r neighbors outside 
that set. Intuitively, the r-reachability property captures the idea that some node inside the set is 
influenced by a sufficiently large number of nodes from outside. We will be using the following 
important property to relate robustness with the concepts of connectivity and minimum degree, 
which are traditional metrics for analyzing information diffusion dynamics. 

Lemma 1: For any r G Z>i, if Q is r-robust, then Q is at least r-connected and has minimum 
degree at least r. 

Proof: We will prove by contradiction. Assume Q is r-robust but not r-connected. Then 
by removing a set 5 of r — 1 suitably chosen nodes, the graph Q can be split into two disjoint 
subgraphs Qi and Q2. Let Si = V{Qi) and ^2 = V{G2)- Thus no node in Si or ^2 has any 
neighbors outside its own set other than from S, implying that neither Si nor S2 is r-reachable, 
which contradicts the fact that Q is r-robust. 

For the second part, since G is at least r-connected, the graph will also have minimum degree 
at least r. ■ 

The above result shows that robustness is a stronger property than connectivity. In fact, there 
exist graphs that are very highly connected but have very low robustness. For example, consider 
the network shown in Figure \T\ Sets Si and ^2 have ^ nodes (suppose n is even), and induce 
complete subgraphs (i.e., each node in each set is connected to all other nodes in its set). Each 
node has exactly one neighbor from the other set. This graph is ^-connected and has minimum 
degree | but is only 1 -robust since both Si and ^2 are only 1 -reachable. 

In the rest of this section, we will motivate the study of reachable sets and robustness by 
considering two specific examples of information diffusion dynamics, resilient consensus and 
contagion, and showing that these metrics (rather than the minimum degree or connectivity) are 
key to capturing the behavior of such dynamics. 

A. Resilient Consensus Using Only Local Information 

The problem of resilient consensus has received significant attention from various communi- 
ties. In this problem, each node i in the network holds some private information (an opinion, a 
measurement, etc.) denoted by Xi[0]. The network is synchronous and at each time-step t E Z>o, 
each node updates its information based on the following rule: 

Xi[t+l] = f,i{x)[t]}), JGV.UW, 



Fig. 1. Example of a graph that has minimum degree j and connectivity -j, but is only 1-robust. 

where x* [t] is the value sent from node j to node i at time-step t and x*[t] = Xi[t]. The function 
/i(-) is specified a priori for each node i in order to achieve some pre-specified global objective. 
There is, however, a possibility that certain nodes do not follow their prescribed strategy. 

Definition 3: A node i is said to be normal if it sends Xi [t] to all of its neighbors and applies 
/j(-) at every time-step t, and is called misbehaving otherwise. D 

Note that the misbehaving nodes are allowed to update their states arbitrarily (perhaps collud- 
ing with other misbehaving nodes to do so) and to send different states to different neighbors 
at each time- step. Clearly, there is no hope of achieving any objective if every node is misbe- 
having. Instead, it is reasonable to consider the resilience of the network to specific classes of 
misbehaving nodes. 

Definition 4 (F -Local Model): For any F E Z>i, a set 5 C V is F-local if it contains at most 
F nodes in the neighborhood of the other nodes, i.e., iVif^iSI < F, Vz G V \ 5. The F-local 
model refers to the case when the set of misbehaving nodes is an F-local set. D 

Under the F-local model, an algorithm is said to achieve resilient asymptotic consensus if 
all normal nodes asymptotically reach consensus (i.e., \xi[t] — Xj[t]\ — )■ as t — t- oo, for every 
pair of normal nodes i,j) for any choice of initial values. As mentioned in the Introduction, 
the connectivity of the network has traditionally been viewed as the key metric with regard 
to resilience of consensus algorithms (and information diffusion algorithms in general). If the 
connectivity of the network is 2F or less (where F G Z>i), then there exists at least one set of F 
coordinated misbehaving nodes that can prevent the network from reaching consensus on certain 
functions of the initial values regardless of the mechanism that is used to achieve consensus [l2l, 
im. On the other hand, if the connectivity is 2F + 1 or higher, various algorithms have been 
proposed to overcome misbehaving nodes under the local broadcast model of communication 
(i.e., where each misbehaving node is restricted to send the same state to all of its neighbors at 



each time-step) S, |I3, H- 

While the above connectivity bounds provide fundamental limitations on the resilience of 
networks to misbehaving nodes, the mechanisms proposed to overcome misbehavior typically 
make the prohibitive assumption that all nodes know the entire network topology. To remedy 
this, we proposed the Weighted-Mean-Subsequence-Reduced (W-MSR) algorithm in [|T2l as an 
extension of a previously proposed algorithm in [|9]: at each time-step, each normal node 
disregards the largest and smallest F nodes in its neighborhood (breaking ties arbitrarily) and 
updates its state to be a weighted average of the remaining values o The W-MSR algorithm is 
efficient, scalable and fully distributed and each node requires no information about the network 
and misbehaving nodes (aside from F, the upper bound on the number of misbehaving nodes 
in its neighborhood). 

To see why connectivity is no longer an appropriate metric for such an algorithm, consider 
the network in Figure [T] and suppose that nodes in Si and ^2 have initial values a and b, 
respectively. When a ^ b,hy using the W-MSR algorithm, each node will throw away the value 
of its neighbor from the opposite set and thus its own value will remain unchanged, even when 
there are no misbehaving nodes. Thus consensus will not be reached in this network, indicating 
that even networks with a large degree or connectivity are not sufficient to guarantee consensus. 
Taking a closer look at Figure [T] we see that the reason for the failure of consensus in this graph 
is that no node in either of the two sets receives enough information from outside its own set. 
However, if a graph is r-robust (for sufficiently large r), new information will penetrate at least 
one out of any two subsets of nodes, preventing stalemates of this form. Using the concept of 
robustness, we derived the following condition in [[T2l for resilient asymptotic consensus. 

Theorem 1 ( /f72l/).- Under the F-local model, the W-MSR algorithm achieves resilient asymp- 
totic consensus if the network is (2F + 1) -robust. D 

Note that if one focuses on other (more conservative) fault models, it is possible to obtain 
improved (i.e., necessary and sufficient) conditions under which resilient consensus can be 
reached [[T6l . [fTTl . Although the robustness condition presented in Theorem[T]is not necessary, we 
will show later in this paper that this metric is conducive for deriving threshold functions under 

^Note that similar dynamics have also been studied in 1101 . 1151 . 1161 . For a more complete description of the W-MSR 
algorithm, we refer to II12I . 0171 . 



which random graphs will facilitate resilient consensus. Furthermore, these threshold functions 
will coincide with the threshold functions for (2F+ l)-connectivity; in other words, we sandwich 
various conditions for resilient consensus by our sufficient condition ((2F + l)-robustness) and 
the fundamental necessary condition ((2F+l)-connected), thereby implicitly providing threshold 
functions for the other fault models as well. 

B. Contagion Dynamics 

Another important case of information diffusion on networks is contagion. Assume each node 
in the network can be in one of two states: infected (e.g., with an idea or innovation) or uninfected. 
Starting with an initial set of infected nodes, the infection spreads (or cascades) in discrete steps 
according to the following rule: each node becomes infected if at least r of its neighbors have 
been infected and once infected, stays infected forevermore. Here, r is called the threshold for 
cascading. This model captures the idea that a node will change its state (to be infected) if a 
sufficient number of its neighbors have done soHl 

For some m < n|j we say there is a contagion from any m nodes ifTSl if any set of initially 
infected nodes with size m causes the whole network to be eventually infected. Note that for 
cascading with threshold r, m > r is necessary to facilitate contagion; otherwise, no nodes will 
be infected besides the nodes in the initial set. Further note that the minimum degree of the 
network is a fundamental limitation for the emergence of contagion, i.e., if the minimum degree 
is less than r, there always exists a choice of initial set of size m < n such that cascading with 
threshold r fails to cause contagion. However, minimum degree by itself is not sufficiently useful 
to capture these dynamics. Consider again the network in Figure \T\ Even though the network 
has large minimum degree, we can choose an initial set with | nodes (either Si or ^2) such 
that cascading with any threshold bigger than 1 fails to produce contagion. The following result 
from [[T , [[TSl (cast in our language of reachable sets) provides the condition for contagion to 
succeedH 

'This rule can be viewed as coiTesponding to a set of best response dynamics in a strategic complements game 1181 . 



^The work in (T|, 1181 considers a slightly different scenario where the cascading threshold is based on the fraction of 
node's neighbors who are infected, but the extension to the absolute threshold case is trivial. 
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Theorem 2: For cascading with threshold r, contagion from any m nodes occurs if and only 
if every subset of V with size up to n — m is r-reachable, where m > r. D 

Given that the notions of reachable sets and robustness are fundamental for the contagion 
and resilient consensus scenarios, we will start by analyzing the complexity of determining the 
robustness of networks, and show that this problem is NP-hard. 

III. Complexity of Determining Robustness in General Graphs 

It is of interest to determine to what degree a graph is robust. We call this problem the 
robustness problem. Although for the graph depicted in Figure [Hit might be easy to determine 
that the graph is 1 -robust but not 2-robust, we show that finding the degree to which a graph 
is robust is NP-hard. Note that by the definition of robustness, for any k E Z>i, if a graph is 
r-robust for some r > k, then the graph is also A; -robust. Thus, to prove the result, it suffices to 
show that it is NP-hard to determine whether the graph is r-robust for some r G Z>i. We first 
show that 1 -robustness is equivalent to 1 -connectedness. 

Lemma 2: A graph Q is 1 -robust if and only if it is 1 -connected. 

Proof: By Lemma [H we know that 1-robustness implies 1 -connectedness; hence, we just 
need to prove the opposite statement. If the graph is 1 -connected, every subset of nodes has at 
least one neighbor outside that set; otherwise, the graph will be disconnected. Thus, for every 
pair of disjoint and nonempty sets, each of them have at least one neighbor outside themselves 
and so the graph is 1 -robust. ■ 

Since there exist polynomial time algorithms to determine graph connectivity [[T9l . 1-robustness 
can be checked in polynomial time. However, in the rest of this section, we will show that the 
robustness problem in general graphs is NP-hard by showing that it is NP-hard to determine 
whether a graph is 3 -robust. The complexity of the problem of determining whether a graph is 
2-robust is still open. Before discussing the reduction we need to introduce the following concept 
lfT9l and define the robustness and r-robustness problems formally. 

Definition 5 (Cut and Cut-set): For a graph Q = {V, S}, a cut C = {S, V\S) is defined as a 
partition of nodes of Q into two subsets S CV and V\S. The cut-set of a cut C = (S, V\S) is 
defined as the subset of the edges of Q with one endpoint in S and the other in V\S. D 

Definition 6 (Robustness and r-Robustness Problems): Given a connected graph Q, the ro- 
bustness problem determines the smallest value of r such that Q is not r-robust. The r-robustness 



problem is the decision version of the robustness problem that determines whether graph Q is 
r-robust for a given r G Z>i. D 

If a graph is not r-robust, then there exist two nonempty and disjoint subsets of vertices A^ B 
such that all nodes in these sets have at most r — 1 neighbors outside their containing sets. 
However, nodes in set X = V\(^U B) can have any number of neighbors outside X. 

The complexity of the robustness problem is equivalent to the complexity of the r-robustness 
problem within a factor of 0(log?7,) (as a binary search can be used for finding the smallest 
value of r for which the graph is not r-robust). To prove the NP-hardness of the r-robustness 
problem we first study the hardness of a problem called the relaxed-r-robustness problem, 
defined as follows. 

Definition 7 (Relaxed-r -Robustness Problem): The relaxed-r-robustness problem determines 
whether there exists a cut C = {A, V\A) in a given graph Q such that each vertex in the 
graph is incident with at most r — 1 edges in the cut-set. If such a cut exists then Q is not 
relaxed-r-robust. D 

It can be observed that the relaxed-r-robustness and the r-robustness problems are equivalent 
if A:" = 0. In the following, we show that the relaxed-3-robustness problem is NP-hard via 
a reduction from NAE3SAT and prove that it results in the NP-hardness of the 3-robustness 
problem. We start by defining NAE3SAT formally [1201 . 

Definition 8 (NAE3SAT): For a set of clauses each containing three literals from a set of 
boolean variables in Conjunctive Normal Form (CNF), NAE3SAT determines whether there 
exists a truth assignment of the variables so that each clause contains at least one true and one 
false literal. D 

It was shown by Shaefer in ll20l that NAE3SAT is NP-complete. Here, we introduce a reduction 
from NAE3SAT to the relaxed-3-robustness problem by constructing a graph Q{(p) for any given 
CNF formula such that G{4>) is not relaxed-3-robust if and only if can be satisfied within 
the NAE3SAT constraints. Our reduction is inspired by the reduction in ||2T1 showing that the 
"matching-cut problem" is NP-hard, but the details and construction are different. Let formula 
(j) consist of m clauses Ci, . . . , Cm, where each clause contains three literals from the set of 
variables X = {xi, . . . , Xt}. The construction of graph G{(p) from a given CNF formula is as 
follows. 



Intermediate Nodes 




Fig. 2. The True-block and False-block in the construction of t/(0). Each block is a complete graph with 2m + 2i nodes. 



Fig. 3. The variable-gadget for variable Xi 



True-block 




False-block 



We first build two blocks, such that each block contains a complete graph of 2m+2t nodes. The 
upper and lower blocks are labeled the True-block and False-block, respectively, as illustrated in 
Figure |2l We complete the construction of G{(j)) by adding subgraphs representing the variables 
and clauses of to these blocks in such a way that if ^(0) is not relaxed-3-robust, then there 
exists a cut that separates the two blocks by cutting through these subgraphs and partitioning 
the nodes into two sets that are not 3-reachable. 

The subgraphs to be added to the blocks are of two types: (i) variable-gadgets, and, (ii) clause- 
gadgets. A variable-gadget is incorporated for each variable Xi G X. This gadget contains two 
vertices representing Xi and Xj, each connected to the True and False-blocks as illustrated in 
Figure |3l Moreover, for each clause in 0, a clause-gadget is constructed by connecting three 
nodes (each representing a literal of the clause) to the True and False-blocks as depicted in 
Figure m Finally, there are edges, called the 'intermediate edges', connecting each literal-node 



True-block 




False-block 



Fig. 4. The clause-gadget for clause Xi\/ Xi\/ Xk- 




Fig. 5. The construction of clause xi V 12 V 2:3 with each literal-node connected to its corresponding variable-node in the 
variable-gadgets. 



in each clause-gadget to its corresponding variable-node in the variable-gadgets. An example of 
Q{(p) for xi V X2 V X3 is demonstrated in Figure |5] 

If graph G{(p) is not relaxed-3-robust, then there exists a cut C = {A, V\A) that partitions the 
nodes of Q{(p) into two sets A and B = V\A such that no node of the graph has more than 
two neighbors outside its set. In the following propositions, we show that this cut C satisfies 
some useful properties (all these propositions assume that graph Q{4>) is not relaxed-3-robust 
and pertain to the cut C = {A,B) highlighted above). 

Proposition 1: In each True and False-block, all nodes are either in set A or B. 



Proof: Since each block is a complete graph with more than five nodes, cut C = {A, B) 
cannot separate the nodes in the same block; otherwise, there exists a node in the block that is 
cut with at least three neighbors outside its own set. ■ 




False-block 



Fig. 6. The only two possible cuts through a variable-gadget resulting in all nodes having at most two neighbors on the opposite 
sides of the cut. 

Proposition 2: For each variable-gadget, cut C = (A, B) leaves the variable-node and its 
negation node on its opposite sides, i.e., they have opposite truth assignments. 

Proof: By Proposition [H there are only two cases to consider: (i) all nodes in the True-block 
are in A and all nodes in the False-block are in B (or vice versa), and (ii) all nodes in the True 
and False-blocks are in A (or similarly in B). 

In case (i), if both nodes of a variable-gadget are in the same set (say A), then a node from 
the False-block in set B has three neighbors in A (as seen in Figure |3]). This contradicts the 
definition of cut C. The only possible cuts for this case are shown in Figure |6] which leave any 
variable node and its negation on opposite sides of C. Thus, the claim is true for case (i). In 
case (ii), if all nodes in the True and False-blocks are in set A and there exists a node in a 
variable-gadget in set B, that node immediately has at least three neighbors in A, contradicting 
the definition of cut C. The only other possibility is that all nodes in variable-gadgets are in A. 
This makes B empty and violates the definition of cut C. Thus, case (ii) cannot happen and the 
claim is proved. ■ 

Proposition 3: For each clause-gadget, cut C = (A, B) leaves at least one literal-node in set 
A and one literal-node in B. 



True-block 



True-block 





Fig. 7. The six allowed cuts through the clause-gadget shown in Figure |4] that result in two non-3-reachable sets. 
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TABLE I 

The truth assignments corresponding to different cuts in a clause-gadget demonstrated in Figure[7] 



Proof: The proof of this proposition is completely analogous to the proof of Proposition |2] 
with the same two cases as mentioned there. In case (i), if all three nodes of a clause-gadget 
are in set A, then a node from the False-block in set B has three neighbors in set A (as seen in 
Figure HJ, which contradict the definition of C. Therefore, the only possible cuts for this case 
are the ones illustrated in Figure |7] It can be seen that none of these six cuts leaves all three 
nodes of a clause-gadget on one side of the cut. Moreover, cut C cannot separate a subgraph of 
a clause-gadget from both the True and False-blocks. Case (ii) follows a proof similar to that of 
Proportion |2l resulting in the fact that this case is not possible and thereby proving the claim. 



Proposition 4: All literal-nodes have the same truth values as their corresponding variable- 
nodes. 

Proof: First, note that a literal-node has the same truth value as its corresponding variable- 
node if and only if they lie on the same side of cut C = {A, B). In the proofs of Propositions |2] 
and [3l it was shown that the only possible case for the True and False-blocks are the case that 
all nodes in the True-block are in A and all nodes in the False-block are in B (or vice versa). 

In this case, assume that there exists a literal-node x in set A such that its corresponding 
variable-node lies in set B (the case that the literal-node is in B and the corresponding variable- 
node is in A can be analyzed similarly). Therefore, the intermediate edge connecting these two 
nodes is in the cut-set of C. Since cut C excises at most two edges incident to any node of 
G{(j)), no matter which other edge incident to x is cut by C, node x remains connected to both 
the True and False-blocks. This implies that the True and False-blocks are in the same set. This 
contradicts the assumption that the True-block is in A and the False-block is in B. Therefore, 
each node in the clause-gadget is in the same set as its corresponding variable-node. ■ 

Using the above properties, we now show that for r > 3, the relaxed-r-robustness problem is 
NP-hard. 

Theorem 3: For any r G Z>3, the relaxed-r-robustness problem is NP-hard. D 

Proof: We prove this claim holds by a reduction from NAE3SAT. To do that we show graph 
Q{(f)) is not relaxed-3-robust if and only if (p has a solution within the NAE3SAT constraints. 
Suppose that ^(0) is not relaxed-3-robust. Then, there exists a cut C = {A,B), where B = 
V\A, such that all vertices of the graph are incident with at most two edges of the cut-set. By 
Propositions \\j^ this cut has to go through all the variable and clause-gadgets; otherwise, it 
separates subgraphs of some gadgets from the graph or cuts through the True or False-blocks 
and leaves some nodes incident with more than two edges of the cut-set. 

By Proposition [21 cut C has to go through the edges of each variable-gadget as depicted 
in Figure |6] and leaves each variable-node and its negation on opposite sides of the cut and 
so determines their truth assignments. Also, by Proposition [3l the clause-gadgets are cut by C 
according to one of the six cases illustrated in Figure |7] which results in having at least one true 
and one false literal in each clause. Furthermore, note that by Proposition HI the intermediate 
edges are never cut by C. Hence, all the literal-nodes corresponding to the same variable are left in 



the same set as that variable-node and the negated literal-nodes are in the other set. Consequently, 
if G{(p) is not relaxed-3-robust, then (p is satisfied within the NAE3SAT constraints. 

On the other hand, if has a solution under the NAE3SAT constraints, then a cut C = 
(^, V\^) can be found in ^(0) such that (i) each variable-gadget is cut so that the variable 
and its complement are connected to the block labeled with their truth values, and (ii) each 
clause-gadget is cut according to its truth assignment as illustrated in Table H It can be easily 
observed that using this cut, no node of graph G{(f)) is incident with more than two edges of the 
cut-set and hence Q{(p) is not relaxed-3 -robust. ■ 





Fig. 8. The construction of 'H{<l>) from the graph G{(t>) depicted in Figure |5] 



We now a construct a graph based on ^(0) to show that the r-robustness problem is also 
NP-hard for r > 3. Graph 7/(0) is built by taking five copies of ^(0) and forming one complete 
graph with all nodes in the five True-blocks and another complete graph on all the nodes in the 
five False-blocks. We refer to each of these copies of ^(0) used in building 7/(0) as a 'box'. 
Figure [8] illustrates 7/(0) using Q{(f)) depicted for = xi V 0:2 V xa in Figure |5l 

Theorem 4: The robustness problem is NP-hard. D 

Proof: Here we prove that the 3-robustness problem is NP-hard which implies the NP- 

hardness of the robustness problem. We show that the 3-robustness problem is NP-hard by 

showing that 7/(0) is 3-robust if and only if S{(p) is relaxed-3-robust for any instance of 

NAE3SAT. 

It can be easily seen that if G{(j)) is not relaxed-3-robust then 7/(0) is not 3-robust. It only 
remains to show if 7/(0) is not 3-robust then ^(0) is not relaxed-3-robust. Assume that sets 
A,B and X partition the nodes of 7/(0) such that (i) A and B are nonempty, and, (ii) each 
node in A and B has at most two neighbors outside its own set. Then we show that there exist 
two nonempty sets A' and B' that partition the nodes of ^(0) such that no node in A' has more 



than two neighbors in B', and vice versa. 

First, for any cUque in 7^(0) with at least five nodes, note that 

1) Set X can contain zero, one, two, or all nodes of the clique, and 

2) If a node of the clique is in A (resp. B), then no node of that clique is in B (resp. A). 
By property (1), each of the True and False-blocks of 7/(0) is either completely a subset of 

X or has at most two of its nodes in X. In the former case, for all boxes in 7/(0), the True or 
False-blocks of the boxes are subsets of A". In the latter case, there are at most four nodes in 
the union of the True and False-blocks of 7/(0) that are in X. Since 7/(0) consists five boxes, 
there exits a box in 7/(0) such that none of the nodes in its True and False-blocks are in X. By 
property (2), each of the True and False-blocks of this box is completely a subset of sets A or 
B. Consequently, there exits a box in 7/(0), denoted by Q'{(j)), such that each of its True and 
False-blocks belongs completely to one of the sets A,B or X. 

Note that ^'(0) and ^(0) are isomorphic and sets A and B can be used interchangeably in the 
arguments by symmetry. Also, we use the symmetry of the true and false values in NAE3SAT 
to further simplify our proof. Based on whether the True-block and False-block of G'{(p) belong 
to A,B or X we have the following cases. 

First assume that all nodes in the True-block of ^'(0) are in X. If the False-block of ^'(0) 
belongs to X, then since sets A and B are nonempty and any node that is not in the True or 
False-blocks has four neighbors in the True and False-blocks, nodes in A and B have at least 
four neighbors outside their containing sets. This implies that 7/(0) is 3-robust. So by property 
(2), without loss of generality we can assume that all nodes in the False-block of G'{(f)) are in 
A. In this case, nodes in B are not in the True or False-blocks and hence they are adjacent to 
at least four nodes outside B. This again implies 7/(0) is 3-robust. 

Therefore, we now assume that all nodes in the True-block of Q'{(j)) are in A. Then by 
property (2), all nodes in the False-block are either in A or B. If the nodes in the False-block 
are in A, then all vertices in B are adjacent to at least four neighbors outside B and 7/(0) is 
3-robust. If all the nodes in the False-block are in B then we show that no node of G'{(p) can 
be in set X. 

Suppose that there exists a node in a variable-gadget in Q'{(j)) that lies in X. Then all of 
the four nodes in the True and False-blocks connected to that node have a neighbor outside 
their containing sets, i.e., a neighbor in X (Figure |9l-(a)). Moreover, since one of the True or 



False-blocks is a subset of A and the other is a subset of B, each of these four nodes has another 
neighbor outside its own set (in sets A or B), (Figure |9l-(b)). Finally, the other variable-node in 
that variable-gadget is in A,B or X. In all these cases this node is in a different set from at 
least one of its four neighbors in the True and False-blocks (Figure |9l-(c)). Hence, there exists 
at least one vertex in ^ or ,B that has three neighbors outside A or B, respectively. Therefore, 
no node in the variable-gadgets can be in set X. 

Furthermore, observe that since one block is a subset of A and the other is a subset of B, then 
each variable-node has at least two neighbors outside its containing set. Since it was assumed 
that each node in A and B has at most two neighbors outside its set, it follows that all other 
neighbors of a variable-node should lie in the same set as that node. Therefore, in Q'{(f)), the 
endpoints of all intermediate edges, i.e., the edges connecting literal-nodes in the clause-gadgets 
to the corresponding variable-nodes, lie in the same sets. This, in combination with the fact that 
none of the variable-nodes in Q'{(j)) are in X shows that no node in any clause-gadget is in X. 
Consequently, no node of G'{(j)) lies in X. 

We have thus shown that if 7/(0) is not 3-robust then ^'(0) is not relaxed-3-robust. Since 
G{(p) and Q'{(p) are isomorphic, graph Q{(p) is not relaxed-3-robust either. Also, we define sets 
A' and B' as the subsets of nodes in Gi(p) that correspond to the intersections of A and B with 
the set of nodes of ^'(0), respectively. Therefore, sets A' and B' are nonempty and partition the 
nodes of ^(0). Moreover, each node of Q{(j)) has at most two neighbors outside its containing set. 
Consequently, 7/(0) is 3-robust if and only if ^(0) is relaxed-3-robust for any NAE3SAT instance 
0. This results in the NP-hardness of the 3-robustness problem and hence the NP-hardness of 
the robustness problem. ■ 

Note that we can construct 'worst-case' networks where even very large connectivity (or 
minimum degree) cannot guarantee sufficient robustness (e.g.. Figured) and there is no efficient 
way to determine the degree of robustness of a general graph, unless P=NP. However, in the 
next few sections, we will study three common random graph models for complex networks and 
show that these graphs inherently possess a certain degree of robustness. 

IV. Robustness of Erdos-Renyi Random Graphs 



We start by studying robustness in Erdos-Renyi random graphs 11221 . 11231 . one of the most 
common models for large-scale complex networks. Erdos and Renyi proposed a number of 
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Fig. 9. Here, the True-block is a subset of A, the False-block is a subset of B and the variable-node corresponding to xt is 
in X. Figure (a) shows the edges of node Xi that are cut. In Figure (b), the edges connecting the True and False-blocks with 
one endpoint in A and the other in B are depicted. In Figure (c), it is assumed that node Xi is either in B or A" and its incident 
edges with the other endpoints in A are marked. It can be seen that the left node in the True-block has three adjacent nodes 
outside A. 



versions of their model and the most commonly studied is the one denoted as Qn,p- In this 
model, the graph consists of n vertices and each possible (undirected) edge between two vertices 
is present independently with probability p (which may be a function of n), and absent with 
probability q = 1 — p. Let the probability of an event be denoted by P(-). Recall that a graph 
property can be regarded as a class of graphs that is closed under isomorphism. A key feature of 
the Qnp model is that we can explore properties that are shared by almost all graphs, a notion 
that is defined as follows. 

Definition 9: Assume P is a graph property and p = p{n) is a function of n. We say that 
almost all G e Qn,p have property V if P(G' G P) — )■ 1 as ?^ — )■ oo, and almost no G G Qn,p 
has property V if P(G G P) -^ as n -^ oo. D 

One important feature of Qn,p, which was demonstrated by Erdos and Renyi, is that the 
model shows a 'phase transition' phenomenon. More precisely, we define a threshold function 
as follows. 

Definition 10 (Threshold Function): A function t{n) of the form ^^ is a threshold function 
for a graph property V if p{n) = SiHnil. implies that almost all G G Qn,p have property V and 
p{n) = ^'"-'"^ implies that almost no G G Gn,p has property V, where g{n) is some function of 
n, X = o{g{n)) and x — ;■ oo as n — ;• oo. D 



All of the properties we are going to study in this section have threshold functions of the 
above form|j Loosely speaking, if the probability of adding an edge is 'larger' than t{n) in the 
sense indicated by Definition \T0[ then almost all G E Qn,p will have property V, and if the 
probability is 'smaller' than t{n), almost no G G Gn,p will have this property. 

Definition 11: For G G Sn,p and constant r G Z>i, define the properties of being r-connected, 
r-robust and having minimum degree r by Cr, TZr and Vj., respectively. D 

Lemma 3 ( ^): For any constant r G Z>i, t(n) = i"'^+(^-i)ininn -^ ^ threshold function for 
property Cj.- It is also a threshold function for property V.,.. 

The following is one of our main results: it establishes that the above threshold function for r- 
connectivity (and minimum degree r) is also a threshold function for r-robustness in Erdos-Renyi 
random graphs. 

Theorem 5: For any constant r G Z>i, t{n) = in'^+(r--i)ininn -^ ^ threshold function for 
property TZr. D 

Proof: For the first part of the proof, we show that for any constant r G Z>i, if p(n) = 
nn+(r- } n nn+x ^ whcrc X = x{n) is somc fuuctiou Satisfying x = o(lnlnn) and x — t- oo as 
n — 7- oo, then almost all G G Q{n,p) are r-robust. Note that if the graph is connected, then it is 
1 -robust. Since the function t(n) = ""+(''"1) " ^"^ jg the threshold function for r-connectedness 
(by Lemma [3]), we directly get the result for the case r = 1. Thus, in the rest of the proof, we 
focus on the cases when r > 2. 

Denote the probability that some set of cardinality up to Uc = [|J is not r-reachable as Pq and 
the probability that some vertex set iS C V with cardinality k (i.e., |iS| = k) is not r-reachable as 
P;,.. By the union bound, we know that Pq < Y2=i ^k- Note that if Pq -^ 0, then all sets of car- 
dinality up to [|J are r-reachable and by the definition of robustness, almost all graphs G G Qn,p 
are r-robust. For fixed S, the probabilities that a vertex v E S has less than r neighbors outside 
and S is not r-reachable are Yll=o ("7^)^"~^ V and {Y7i=o ("7^)'?""^~V)^' respectively, where 
q=l-p. Since there are (^) such sets S, we know that P^ < (^)(EI=o {'"''') q''~''~'p')''- In 
the rest of the proof, we focus on the cases where k < ric- We obtain the following upper bound 

*There are also various other definitions of threshold functions, but they are typically more conservative than the one we 
consider here 1231 . 
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Note that (^) < (^)^ < n''. In the last step, Ci is some constant upper bound for ^_'^w-i 
satisfying < ci < 2er for sufficiently large n. By saying that a property holds for sufficiently 
large n, we mean that there exists some uq G Z>i such that this property holds for all n > uq. 
The notion of 'for sufficiently large n' will be implicitly assumed for the other constant upper 
bounds ci,C2 etc., introduced in the rest of the proof. Note that I — p < e~^ and recall that 
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Note that °'"+(^ ^J^" '^"+^ <; 2 for sufficiently large n and thus < C2 < Ci2' ^. Next, note that 
In (1 - p) = - Y.T=i f for p G [0, 1), and thus. 
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Note that in ©, since ^^^2 ^ < Y.T=2P'"'^ = T^ and kp"^ < np^ = o(l), < C3 < 1 for 
sufficiently large n. Further note that C4 = 026'^^ and thus < C4 < re^2^. 

Let f{k) = 2^ be a function of k, where k e Z>i. Then f'{k) = '^'"^g"^^ . We can see 
that f'{k) < if A; < i and f'{k) > if A; > i and thus, f{k) < max{/(l), /(nj} for 
1 < A; < n,. We know that f{n,) = "-^^^ < ^^4^ = 2exp{f -Inn} = 2exp{i(-lnn + 
(r — 1) In Inn + x)} = o(l) and /(I) = e^ > 1. Thus, for sufficiently large n, f{k) < /(I) < e 
and Pfc < {c/^e^~^^ . We now have: 

Tie 00 ]^_2, 
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Recall that a; — )■ 00 as n — )■ 00 and thus c^e = o(l). Thus we get Pq = o(l), completing the 
first part of the proof. 

For the second part of the proof, we need to show that for any constant r G Z>i, if p{n) = 

nn+(r- } n nn-x ^ whcrc X = x{n) is soHic function satisfying x = o(lnlnn) and x — t- 00 as 

n — 7- 00, then almost no G G Q{n,p) is r-robust. The result is obtained by combining Lemma [1] 

and Lemma [3l ■ 

Remark 1: The above theorem shows that Erdos-Renyi graphs gain a great deal more structure 
at the threshold t{n) = ""+(''~i) " "" jj^^n simply being r-connected (or having minimum degree 
r). Whereas r-connectedness implies that given any two disjoint sets, at least one of the sets has 
r neighbors outside, the above result shows that in fact, there is (at least) one vertex in one of 
the sets that by itself has r neighbors outside. D 

A. Implications for Consensus and Contagion 

We now show what the above result means for resilient asymptotic consensus and the emer- 
gence of contagion in the Qn,p model. 

Definition 12: For G G Qn,p and constant F G Z>i, define TZACp to be the property that 
resilient asymptotic consensus is reached under the F-local model using the W-MSR algorithm 
for any initial values. D 

Theorem 6: For any constant F G Z>i, t{n) = ^n^+^^i^i^" ig a threshold function for property 

nACp. □ 

Proof: As discussed in Section IH-AI and Theorem [H (2F + 1) -connectivity is necessary 

and (2F + l)-robust is sufficient, respectively, for the W-MSR algorithm to achieve resilient 



asymptotic consensus under the F-local model. Thus, by Lemma [3] and Theorem |5j the resuk 
follows. ■ 

Definition 13: For G E Qn,p and constants r G Z>i and a E (0, 1), define XJ^" to be the 
property that contagion from any an nodes occurs when cascading with threshold r. D 

Theorem 7: For any constants r E Z>i and a E (0, 1), t{n) = °"+(''^ ) " °" j^ ^ threshold 
function for property XJ^°. E 

Proof: First, note that the proof of Theorem |5] still holds if we replace ric by (1 — a)n£ 
indicating that the probability that any subset with size up to (1 — a) n is r-reachable goes to 
1 as n — )■ oo. Thus, by Lemma [3l Theorem |2] and the discussions in Section IH-Bi the result 
follows. ■ 

The above theorem indicates that at the threshold t{n) = ""+(^~ ) '^ "" ^ Erdos-Renyi graphs 
gain the ability to allow information initially held by any (constant) fraction of nodes to cascade 
through the network to all other nodes. Theorem |5] (together with Theorems |6] and U} implies 
that 'worst-case' networks (such as the graph in Figure [D will not appear (with probability 1) 
in Erdos-Renyi graphs. 

V. Robustness of Geometric Random Graphs 

In addition to the Erdos-Renyi model, another widely used model is the geometric random 
graph, which captures edges between nodes that are in close (spatial) proximity to each other. 
In Section |lVl we showed that the properties of connectivity and robustness have the same 
threshold function in Erdos-Renyi graphs. In this section, we will prove similar results for 
geometric random graphs. 

We consider the geometric random graph model G^pi^ which is a random (undirected) graph 
generated by first placing n vertices at random (uniformly and independently) in a region Vt^ = 
[0, lY, where d E Z>i. Two vertices in the graph are then connected by an edge if and only if the 
distance between them is at most a threshold p. In the more widely- studied model Qn,p^ ^^ which 
the vertices are distributed on [0, l]'^, where d E Z>i, graph properties are typically explored 
when 71 — 7- oo and p — )■ [[24|. Thus, this model is more suitable for dense random networks [[T3l . 
In the more general model Q^pi, however, the density y| can converge to or some constant, 

^Note that a does not need to be a constant and the resuU holds as long as In Inn = o(Qlnn) (e.g., a can be -^^^j^)- 



making it suitable for capturing both dense and sparse random networks. Furthermore, the model 
Gnpi i^ more convenient for us to deal with. 

We define properties for almost all graphs in Q^pi ^^ follows, similar to the Qn,p model. 

Definition 14: Assume P is a graph property. We say that almost allG E Q!^ i have property 
V if F{G G P) ^ 1 as / ^ oo, and almost no G G Q^p^ has property V if F{G G P) ^ as 

/ -)■ oo. n 

Note that we study these properties in Q'^ , as I -^ oo and n and p are functions of /, 
i.e., n = n{l) and p = p{l). In the rest of this section, we focus on the one-dimensional case 
and consider the line VLi = [0,1]. We start by providing a result showing that connectivity and 
robustness cannot be very different in one-dimensional geometric graphs (regardless of how they 
are generated). 

Lemma 4: In Vti = [0,1], if the graph is [|r J -connected, then the graph is r-robust. 

Proof: Denote vertex z's value on the line r2i = [0, /] by x{i), i E {I, . . . , n}. Without loss 
of generality, we assume if z < j, then x{i) < x{j), yi,j E {1, . . . , n}; otherwise, we can just 
renumber the vertices. When the graph is [|r J -connected, any interval [x,x + p] C (x{l) , x{n)) 
contains at least [|rj vertices; otherwise, removing the vertices in [x,x + p] will disconnect the 
graph, which contradicts the assumption that the graph is [|r J -connected. 

For a set S of vertices, we say the set of consecutive vertices {ii, . . . , ik}u where k E Z>i, 
is a cluster of S, denoted as C5, if {zi, . . . , ik} C S and zi — 1, i^ + 1 ^ S. Partition S into its 
clusters, and denote the z-th cluster of S by Cg (which is ordered by the positions of the vertices 
inside the cluster). We say two clusters Cg = {zi, . . . , ik} and C;^ = {ji, ■ ■ ■ ,jt} are connected 
if either \x{ik) — x{ji)\ or |x(zi) — x{jt)\ is smaller than p. Denote d{i, p) as the interval within 
distance p of x(z), i.e., d{i,p) = [x{i) — p,x{i) + p]. We say a set S of vertices is a full coverage 
of the graph if [x{l),x{n)] C \J.^^ d{i, p). 

For any set S of vertices, consider the following two cases: 

• Case 1: there exist two clusters Cg and C'g^ which are not connected; 

• Case 2: 5 is not a full coverage of the graph. 

Assume S = {z, . . . ,j}. If Case 1 is true, there will be [|rj vertices which are not in S 
belonging to d{ik, p) and S is [|r J -reachable. If Case 2 is true, then either there exist two 

^In the rest of the proof, when we refer to a set of vertices {ii, . . . , ik} we assume it is ordered, i.e., ii < • • • < i^. 



Fig. 10. Illustration of the proof of Lemma |4] 

clusters of set S which are not connected, or \x{i) — x{l)\ or \x{j) — x{n)\ (or both) will be 
bigger than p and S is [|r J -reachable. Thus, consider any pair of sets Si and S2', if either 
Case 1 or Case 2 is true for either of the two sets, then at least one of them is [|r J -reachable. 
Otherwise, we can choose a vertex i G 1S2 such that d{i, p) C {x{l),x{n))U Since Case 2 is not 
true for the set Si, there must exist at least one vertex of Si in both d{i, p) fl (x(l), x(z)) and 
d(z, p) n (x(z), x(n)) . The situation is illustrated in Figure [TOl where j, k E Si and x{j) < x{i) < 
x{k). The interval [x{j)—p, x{k) +p\ can be divided into eight segments based on x{j),x{i),x{k) 
and d{j, p) , d{i, p) , d{k, p), and let a,b, . . . ,h be the number of vertices which are not in Si within 
their related intervals, respectively. If Si is not r-reachable, then a + b + c + d + e + f<r — 1 
and c + d + e + f + g + h < r - 1. Thus, we get a + b + 2{c + d+ e + f) + g + h < 2r -2 and 
b+c+d+e + f+g < 2r — 2~(a+c+d+e + f + h). Let the number of vertices in d{i, p) which are 
not in ^2 be s. Then s > 2\_\r\- {b+c+d+e+f+g) > 3r-l-{2r-2) + {a+c+d+e+f+h) > r. 
So if Si is not r-reachable, S2 must be r-reachable. Thus, if the graph is [|r J -connected, given 
any pair of sets, at least one of them is r-reachable and the graph is r-robust. ■ 

Once again, note that the result in Lemma |4] does not depend on how the positions of the 
nodes are generated. Next we will present an asymptotic approach to analyzing one-dimensional 
random graphs (complementary to the analysis in Lemma ID. We will use the following result 
from [|T3l. 

Theorem 8 ( KT3\]}: Assume that pn = kiln I for some constant k > and p = n(^^). 

• If A; > 2, or A; = 2 and p — )• 00, then almost all G E Cn i are connected. 

• If A; < (1 — e) and p E 0(/^) for some < e < 1, then almost no G G Qi^p^i is connected. 

D 

We now present the following conditions under which the one- dimensional random graph 

becomes r-robust,'" 



'This is possible if x{n) — x{l) > 3/9; the case where x{n) — x{l) < 3p is trivial. 
The proof of this result is inspired by the prior work on Gn.p.i in 1131 . 



Theorem 9: Assume that pn = kiln I for some constant A; > and p = fi(i^). 

» If k > [|rj + 1, or A; = [|rj + 1 and p — t- oo, then almost all G E Q^ i are r-robust. 

• If fc < (1 — e) and p E 6(/'') for some < e < 1, then almost no G G ^.^ ^ is r-robust. 

D 

Proof: In order to prove the first part, we know it is sufficient to show that any interval of 

length p contains at least [|rj vertices (as argued in the proof of Lemma |4j. Let fii = [0, /] be 

subdivided into c = — ^ non-overlapping segments of length Tr^rrr- Then any interval of 

length p will contain at least [|rj whole segments and thus we just need to show every segment 
contains at least one vertex. 

Let oj be a random variable representing the number of empty segments. Since a; is a 
nonnegative integer random variable, by Markov's inequality we know F{u > 0) < E((X'), 
where E(aj) = c(l — -)" is the expected value of uj. Since I — x < exp(— x), we have 

EH = c(l--)"<cexp(--) 

= — exp — -o— ; In / 

p "^ ^ [frj + 1 ^ 

_ Lld + 1 1-^' 



P 

If k > [|rj + 1 and p = fi(i^), or A; = [|rj + 1 and p — )■ oo, then E{uj) — )■ as / — )■ oo, 
completing the proof for the first part. The second part is obvious, because under the given 
conditions. Theorem [8] indicates that almost no G G ^^ ^ is connected, and the result follows. 



VI. Robustness of Preferential Attachment Networks 

Before discussing our final model for complex networks, we start by reviewing the following 
construction method for r-robust graphs from [fT2] . [iTTl . 

Theorem 10 ( / f72l/ . /[TTI/].- Let Q = {V,£} be an r-robust graph. Then graph 

where f„eto is a new vertex added to Q and £new is the edge set related to Vnew, is r-robust if 

d^ > r. D 



The above theorem indicates that to build an r-robust graph with n nodes (where n > r), 
we can start with an r-robust graph of order less than n (such as some complete graph), and 
continually add new nodes with incoming edges from at least r nodes in the existing graph. The 
theorem does not specify which existing nodes should be chosen as neighbors. As argued in [ | T2 | . 
a particularly interesting case is when the nodes are selected with a probability proportional to 
the number of edges that they already have; this is known as preferential-attachment, and leads 
to the formation of so-called scale-free networks [|25l . Specifically, the construction process in 
Theorem [10] coincides with the Barabdsi-Albert (BA) model ll25l : start with a network of tq 
nodes and add new nodes to the network one at a time, where each new node connects to 
r existing nodes chosen by the preferential-attachment mechanism. To the extent that the BA 
model is a plausible mechanism for the formation of complex networks, our analysis indicates 
that these networks will also be resilient to locally-bounded misbehaving nodes (provided that r is 
sufficiently large when the network is forming). Note that the network constructed in Theorem [10] 
is (at most) r-connected, since each node only connects to r existing nodes. In other words, in 
scale-free networks generated by this process, r-connectedness implies r-robustness (if the initial 
set is r-robust). 

Theorem 11: In the BA model, when the initial network is r-robust, then the generated scale- 
free network is r-connected (or has minimum degree r) if and only if the network is r-robust. 

D 
Proof: Note that in the BA model, if there exists some new node which connects to less 
than r existing nodes, then the network will have minimum degree less than r, and so will 
be neither r-connected nor r-robust; on the other hand, if all of the new nodes connect to r 
existing nodes, then by Theorem [TO] the network will be r-robust, and thus r-connected (and 
with minimum degree r). ■ 

VII. Summary 

In this paper, we studied the robustness property of complex networks. Under the assumption 
of full knowledge of the network topology by every node, it has been well established that 
connectivity is the key metric for resilient consensus. However, in [[TTI . [[T2l . [[T71 , it was shown 
that connectivity is no longer an appropriate metric for an algorithm that uses a purely local 
filtering strategy. Instead, a topological condition termed robustness plays a more fundamental 



role. The notion of a reachable set, which is a building block for robustness, also plays a key 
role in the study of contagion dynamics. While it is NP-hard to determine robustness in general 
graphs and in the worst-case, networks with very large connectivity (and minimum degree) 
cannot guarantee sufficient robustness, we showed in this paper that the notions of robustness and 
connectivity coincide in complex networks. Specifically, we considered three common models for 
complex networks. In Erdos-Renyi random graphs, we showed that connectedness (and minimum 
degree) and robustness share the same threshold function. In geometric random graphs, we proved 
that in the one-dimensional case, [|r J -connected implies r-robust (regardless of how they are 
generated) and robustness exhibits similar thresholds as connectivity. In preferential attachment 
networks, we showed that when the initial network is robust, connectivity (and minimum degree) 
and robustness are equivalent in the BA model. These findings indicate that those networks have 
a great deal more structure than previously recognized; the implication of this for other classes 
of dynamics is a promising direction for future research. 
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